Privacy Policy

Data we process

When operating querrio search for a website, we process: the user's search query, the page content indexed by the site operator, technically necessary metadata (truncated IP address only as a daily rotating hash, coarse device class, browser and operating system, country/region, page path of the search, timestamp, a session ID valid only within the browser tab) and — if enabled — click events on search results to improve quality. We do not deliberately process personal data contained in indexed pages.

Purposes and legal bases

Processing takes place to provide the search function (Art. 6(1)(b) GDPR — contract performance), to ensure IT security and troubleshooting (lit. f legitimate interest) and on the basis of your consent (lit. a) for optional analytics features. You can withdraw your consent at any time.

• Contract performance: delivering search results
• Legitimate interest: abuse protection, rate limiting, diagnostics
• Consent: optional search analytics and click tracking

AI processing (embeddings)

To deliver semantic search results, we convert indexed page content into vector embeddings. These mathematical representations do not allow conclusions about natural persons and are computed on EU servers. Search queries are briefly transmitted to an AI provider for intent detection without permanently storing the query.

Hosting and data processing agreement

All data is hosted on servers in the European Union. We have data processing agreements (DPA) with our hosting provider and AI provider in accordance with Art. 28 GDPR. No data is transferred to third countries.

Retention period

Search query logs are kept for a maximum of 30 days and then automatically deleted. Email addresses, phone numbers and account numbers in search queries are removed before storage. Afterwards only anonymous daily statistics without personal reference remain (search terms only with at least 3 searches). No cookies are set and no fingerprinting is used. Indexed page content remains stored as long as the contract with the site operator exists and is deleted upon termination. Analytics data is aggregated or deleted after 24 months.

Your rights

You have the right at any time to access, rectify, erase, restrict processing, data portability and object. You can also lodge a complaint with the competent supervisory authority (for South Tyrol: Garante per la protezione dei dati personali, Italy).

• Access to your processed data
• Rectification of incorrect data
• Erasure („right to be forgotten”)
• Objection to direct marketing and analytics

Cookies and tracking

querrio uses only technically necessary cookies for the search function. Analytics and marketing cookies are only set after your explicit consent via the GDPR banner. See the cookie policy for details.